WHAT IS CLAIMED IS : 

1. A method for identification, comprising the steps of: 

(a) generating system parameters Gy, G 2 , P and e and storing the system 
parameters in a memory by a system administrator, wherein Gy and G2 are cyclic groups 
of order m, P is a generator on the cyclic group Gy, e is a bilinear map defined as 

£ GjXGji >G 2 

(b) generating a private key 6, c> and a public key v and storing the public 
key v in the memory by a prover or the system administrator, wherein a, b and c are 
randomly chosen in Z m * where Z m * is a multiplicative group of order m\ 

(c) generating random numbers ry, r 3 e Z OT * for obtaining an evidence (x, 0 
and sending the evidence (x, 0 to a verifier by the prover; 

(d) receiving the evidence (x, Q), selecting a randomly selected number o> □ Z m * 
to obtain a query i?, storing the evidence (x, Q) and the randomly selected number co in 
the memory and sending the query R to the prover by the verifier; / 

(e) receiving the query R, computing a temporary value S to obtain a response Y 
and sending the response Y to the verifier by the prover; and 

(f) determining a legitimacy of the prover by employing the system parameters 
G;, G2, P and e, the public key v, the evidence (x, Q) and the randomly selected number 
co by the verifier. 

2. The method of claim 1, wherein, in the step (b), the public key v is obtained by 
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v=e(P,P) abc 



3. The method of claim 2, wherein, in the step (c), the evidence (x, Q) includes a 



x=e(P, P) 



first evidence value and a second evidence value 



2 = r i r 2 r 3 P 



4. The method of claim 3, wherein, in the step (d), the query R is obtained by 

p-®p 



5. The method of claim 4, wherein, in the step (e), the temporary value S is obtained 

S=r l r 2 r 3 R 

by and the response Y is obtained by 



Y=abcP+(a 




6. The method of claim 5, wherein the verifier determines the legitimacy of the 
prover by verifying 
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A 

e 



= e(abcP+(a+b+c)S,P) 

= e(abcP-h(a-hb^-c)r l r 2 r 3 R :> P) 

= e(abcP-h(a-\-b+c)r l r 2 r 3 ®P,P) 

A 

^ ak+(a+i+c)rr/ (D 

= e(P,Py 

= e(P,P) 
= e(P,P) 



abc 



abc 



A 



= e(P,P) 
= e(P,P) 



A 



=e(P,P) 

A 



abc 



abc 



abc 



(a+b+c^rffjb 

(a+£+c)co 



e(P,P) 
e(P,r^ 2 r^P) 

e(P Qy( a+b+c > 

e{{a \ b+c\PO)° 
e(aP+bP+cP,Q) 



CO 



v ♦ e{aP-\-hP \ cP,Q) 



CO 



7. A method for identification, comprising the steps of: 

(a) generating system parameters Gj, G2, P and e and storing the system 
parameters in a memory by a system administrator, wherein Gj and G2 are cyclic groups 
of order m, P is a generator on the cyclic group Gj 9 e is a bilinear map defined as 
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(b) generating a private key <aj 9 a 2t ... a n > and a public key v and storing the 
public key v in the memory by a prover or the system administrator, wherein aj,a 2i - - a n 
are randomly chosen in Z m * where Z m * is a multiplicative group of order m; 

(c) generating random numbers r u r 2 , ... r n ^ Z m * for obtaining an evidence (x, 
Q) and sending the evidence (x, 0 to a verifier by the prover; 

. (d) receiving the evidence (x, 0, selecting a randomly selected number co □ Z m * 
to obtain a query i?, storing the evidence (x, Q) and the randomly selected number co in 
the memory and sending the query R to the prover by the verifier; 

(e) receiving the query R, computing a temporary value S to obtain a response Y 
and sending the response Y to the verifier by the prover; and 

. (f) determining a legitimacy of the prover by employing the system parameters 
Gy, G 2 , P and e, the public key v, the evidence (x, Q) and the randomly selected number 
co by the verifier. 

8. The method of claim 7, wherein, in the step (b), the public key v is obtained by v 

- e(P t P) a > a > \ - • 

9. The method of claim 8, wherein, in the step (c), the evidence (x, Q) includes a 
first evidence value 

v = e(P, p) r f'- r * and a second evidence value Q = r/r2. . .r n P. 



10. The method of claim 9, wherein, in the step (d), the query R is obtained by 
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11. The method of claim 10, wherein, in the step (e), the temporary value S is 
obtained by S = rjr 2 ...r n R and the response Y is obtained by Y = aia 2 ...a n P + 
(a J +a 2 +...+a n )S 



12. The method of claim 11, wherein the verifier determines the legitimacy of the 
prover by verifying 

e(Y,P)=e(a,a 2 ...a n P + (ai+a 2 +...+a n )S,P) 
= e(aia 2 ...a„P + (aj+a 2 +..,+a n )r l r 2 ...r n R, P) 

= e(aia 2 ...a„P + (a,+a 2 +...+a n )r 1 r 2 ...r n a>P, P) 
, =e((a ] a 2 ...an + (a,+a 2 +...+a n )rir 2 ...r n (o)P,P) 
= e(P, P) afll ■ a "' ¥(a > +a ' + • +a >w r »<° 
= e(P, P) a ' a '~ a " ' e(P, p)< a r a i + +a>< r 2- r n<» 

- e(P, P)"'"-'"- ■ e(P, r,r 2 ...r„P) (a ' +a ' + - +a "'"' 
= e(P, pf <*>-"• >e(P, 0 ra ' +a ' + - +a > 

- e(P, Pf^ a " ■ e((a, \-a,4 ...+a„), PQf 

; = e(P, P) afll ■ e(a,P+a 2 P+... +a n P, Qf . . ; 

= v - e(a,P+a 2 P+... +a n P, Qf . 
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